312-50V12 · Question #194
In an advanced digital security scenario, a multinational enterprise is being targeted with a complex series of assaults aimed to disrupt operations, manipulate data integrity, and cause serious…
The correct answer is C. Side-Channel Attack. The attack described exploits hardware vulnerabilities involving speculative execution and instruction misprediction, using observable side effects from shared system state to infer in-flight data values.
Question
Options
- ARowhammer Attack
- BWatering Hole Attack
- CSide-Channel Attack
- DPrivilege Escalation Attack
How the community answered
(23 responses)- A13% (3)
- B4% (1)
- C57% (13)
- D26% (6)
Why each option
The attack described exploits hardware vulnerabilities involving speculative execution and instruction misprediction, using observable side effects from shared system state to infer in-flight data values.
A Rowhammer attack specifically targets DRAM by repeatedly accessing a memory row to cause bit flips in adjacent rows, leading to memory corruption, not the inference of data via speculative execution side effects.
A watering hole attack is a web-based social engineering tactic where attackers compromise websites frequently visited by targets to infect them with malware, which is unrelated to hardware-level speculative execution exploits.
This scenario perfectly describes a side-channel attack, specifically a microarchitectural side-channel attack. Attackers exploit vulnerabilities in the CPU's speculative execution feature and misprediction mechanisms, observing indirect physical manifestations like cache timing differences or power consumption variations (the 'subtle side effects observable from the shared state') to infer information about data being processed.
Privilege escalation is the *goal* of many attacks, but the question asks for the *type of attack* based on the described *method* of exploiting speculative execution and side effects to infer data, which is a specific mechanism, not merely a higher-level objective.
Concept tested: Microarchitectural Side-Channel Attacks (e.g., Spectre/Meltdown)
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/intelligence/spectre-meltdown
Topics
Community Discussion
No community discussion yet for this question.